JVN#48774168: PHP 2chBBS vulnerable to cross-site scripting

PHP 2chBBS provided by Kagaminokuni is software that can be downloaded from the Internet. PHP 2chBBS is a bulletin board software that can be used by placing it on a website. PHP 2chBBS contains a cross-site scripting vulnerability (CWE-79).

Impact

Due to this vulnerability, a victim being tricked into accessing a malicious link may have the webpage display altered or Cookie information in the victim’s web browser may be leaked.

Solution

Consider stop using PHP 2chBBS version bbs18c
Since the developer was unreachable, existence of any mitigations are unknown.